Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
File:                     18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft (raw, json)
Hash identifier:          4UiE1D2V+tv2L9vz9i/mlnvZTHoFZp3lfjo4GBUcHYU=
Subject key identifier:   B7:65:BA:D3:D9:59:EA:65:5F:80:EC:5D:8F:D3:D3:FE:8A:A5:D9:23
Authority key identifier: 18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F
Certificate issuer:       /CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
Certificate serial:       5D90702873BAFDB57E5EF1330F92B7C4235F8339
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
Manifest number:          24
Signing time:             Mon 20 Oct 2025 05:58:49 +0000
Manifest this update:     Mon 20 Oct 2025 05:53:49 +0000
Manifest next update:     Tue 21 Oct 2025 07:02:49 +0000
Files and hashes:         1: 18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl (hash: /JEByS25ZfR1+kny0BZVwvAg9qP8qWMf4BrT/0pvrng=)
                          2: 3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa (hash: d+F/MoZB9dIyvh9ZfCYZnxIIMgbORW/1yn8Ti89220g=)
                          3: 3137372e37312e38382e302f32332d3233203d3e20323633363034.roa (hash: y3i+tL32Gt1MzIbujXnfGHhx+RPfsm1jXKbGTm4P450=)
                          4: 3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (hash: 1EPafl6/j4xS5Z9rsZ4zDN5lPIhIVttNgxoQkt7bNl4=)
                          5: 3137372e37312e39302e302f32332d3233203d3e20323633363034.roa (hash: rh97MAAWm3VkCmx9gUk9tJuUFAvZ6BW0aCVqK93ohx8=)
                          6: 3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (hash: np+an034q6da9/NJZqksyQdEHZlPOnhDi8N/bPfxYT4=)
                          7: 3137372e37312e38382e302f32322d3232203d3e20323633363034.roa (hash: aVYZixEJOQPS3q3LNRf1+bi9wIOEct5Sgq5Pj4n1J2c=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:90:70:28:73:ba:fd:b5:7e:5e:f1:33:0f:92:b7:c4:23:5f:83:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
        Validity
            Not Before: Oct 20 05:53:49 2025 GMT
            Not After : Oct 21 07:02:49 2025 GMT
        Subject: CN=B765BAD3D959EA655F80EC5D8FD3D3FE8AA5D923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:b4:a8:d1:bb:a6:81:50:97:2d:31:d3:02:
                    af:f9:7f:9b:43:36:bb:63:e9:29:9f:c6:ef:55:8f:
                    51:eb:46:90:1d:aa:de:ea:34:39:ba:0e:30:a6:1d:
                    b5:91:10:11:1a:d5:50:2a:72:89:bf:f2:4e:41:f4:
                    dd:20:bc:ae:db:ee:46:b3:9a:e6:e6:69:cb:64:a0:
                    e7:9e:c7:96:03:e0:c6:fa:63:40:ac:50:ab:6a:73:
                    b8:0e:af:42:96:73:75:1e:1a:9c:03:1f:ac:1c:26:
                    91:be:2b:47:f3:1b:08:0c:7e:7e:d6:a2:f0:e5:36:
                    05:78:c9:48:db:71:cf:d5:62:ac:89:8c:05:82:25:
                    ce:4e:a8:7f:69:7b:61:e2:c2:2e:bf:91:48:a7:f7:
                    e8:61:27:12:22:7f:c0:67:16:ea:a3:c6:ba:7a:22:
                    95:b6:7e:28:5f:0a:c7:d1:02:49:db:bc:56:55:45:
                    cf:66:10:ad:2a:4c:02:80:cb:da:bc:0e:f8:83:cc:
                    4f:19:1d:01:fb:27:74:48:9b:dd:06:f9:17:e0:34:
                    c1:6a:7b:0e:ff:31:fe:ac:fc:0e:c0:6e:36:c1:5f:
                    21:dd:40:cb:c0:7e:b6:5d:da:38:3b:a6:f9:61:8a:
                    bd:52:39:6b:81:71:03:63:cd:2e:c2:c5:c5:12:ca:
                    73:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:65:BA:D3:D9:59:EA:65:5F:80:EC:5D:8F:D3:D3:FE:8A:A5:D9:23
            X509v3 Authority Key Identifier:
                keyid:18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:56:79:dd:ea:9c:84:cf:6a:08:eb:6a:ea:4e:4c:17:18:
         07:a1:62:f1:e8:71:63:7c:ef:f2:0b:f5:91:a4:8a:bc:e1:5c:
         9a:f4:0c:e1:a8:7a:c1:c6:61:e9:95:ce:95:5c:a9:d7:1d:f7:
         7b:c8:27:02:be:c8:43:73:2b:c6:97:5f:28:92:9a:a9:a5:7d:
         df:80:54:8d:45:d4:26:db:4a:73:a9:5c:ef:9a:c8:3a:61:7b:
         0f:18:f4:96:e1:f8:2d:69:9b:d3:40:79:1c:18:89:00:1b:40:
         d1:7a:9b:66:20:53:48:98:6b:17:a9:49:3b:be:34:72:8a:52:
         c9:ca:42:ea:84:da:8b:c6:3f:ba:d2:e2:c7:47:cd:14:21:35:
         8c:31:d8:10:67:f7:c5:3b:c7:ea:d4:48:f3:53:c4:5e:b7:f4:
         d0:4a:ad:c6:0a:eb:8d:46:56:7d:19:f7:e9:5a:c9:ac:4c:75:
         fe:73:bf:30:7d:05:10:4e:e5:5d:79:05:40:6b:74:1b:ec:a0:
         fe:39:36:04:a3:97:86:60:c9:16:c9:c6:d5:1b:77:a0:30:59:
         83:13:c8:f8:3b:9b:4d:f4:9f:2b:31:69:67:06:71:d9:f0:e7:
         74:1e:c8:d7:48:05:b6:f7:1a:8b:9a:43:30:76:75:0c:05:31:
         a6:8c:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:16:22 2025 by rpki-client